Describe Azure Identity, Access, and Security AZ-900 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is a key benefit of passwordless authentication in Azure?

   • AIt reduces the risk of password-related attacks such as phishing and credential theft
   • BIt ensures that users never need to verify their identity again
   • CIt allows users to share passwords securely with team members
   • DIt automatically grants access to all Azure resources without any checks
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is the purpose of Azure External Identities?

   • ATo automatically create user accounts for all employees in your organization
   • BTo allow external users to collaborate with your organization while maintaining control over access
   • CTo provide a separate identity system for each Azure subscription
   • DTo store credentials for all third-party applications in a central vault
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which of the following is a key capability of Microsoft Entra ID?

   • AProviding virtual network connectivity between on-premises and Azure
   • BStoring and retrieving unstructured data using REST APIs
   • CManaging user identities and enabling single sign-on to cloud applications
   • DAutomating the deployment of virtual machines using templates
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company uses Microsoft Entra ID for employee authentication. They want to provide employees with access to a third-party SaaS application that supports SAML-based SSO. What should they do in Microsoft Entra ID to enable this?

   • AAssign the Application Administrator role to all employees.
   • BAdd the application from the Microsoft Entra app gallery and configure SAML-based single sign-on.
   • CUse Microsoft Entra Domain Services to join the SaaS application to the domain.
   • DCreate a guest user account for each employee in the SaaS application.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the purpose of the defense-in-depth model in Azure security?

   • ATo use a single, strong security control to protect all resources
   • BTo eliminate the need for security monitoring
   • CTo ensure that all security controls are placed at the network perimeter
   • DTo provide multiple layers of security controls so that if one layer fails, others still protect the resource
   Reveal Solution Discussion Select an answer first